CVE-2007-1805 SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter.
HighCVSS 7.5
EPSS 1.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the genreid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myxoops debaser | <= 0.92 | No fix listed |
References
- 34466 vdb-entry
- 23253 vdb-entry
- xoops-debaser-genre-sql-injection(33372) vdb-entry
- 3630 exploit